This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft File: wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft (raw, json) Hash identifier: dw7Oyr/mVlYf8BRB7gMcHAlf+ke7bKtFeIysJEi61BU= Subject key identifier: 71:EB:5D:6E:22:20:7B:EB:A7:45:D8:EA:E4:E5:3F:80:19:2F:A0:F2 Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D Certificate issuer: /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d Certificate serial: 019AF12DA9CB8A03CED70FB3EFA33F4AD331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa (hash: 0TAu53NWs0YR6cx7TDfJzDZx9gyaFfPOZu8ZpGicQ9k=) 2: wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl (hash: urgD1+e5i/VQgs80RQTCK7Cgar9VxxBmarx3yF/8HHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a9:cb:8a:03:ce:d7:0f:b3:ef:a3:3f:4a:d3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=71eb5d6e22207beba745d8eae4e53f80192fa0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:f8:dc:d7:fa:ae:7a:88:d7:06:1c:59:f6: 94:39:ef:4d:af:2b:bc:3b:13:7b:a1:88:61:80:09: e3:22:2b:15:12:d1:e0:fd:25:d9:d5:9b:ca:29:74: f8:15:bf:d5:e3:1e:d3:e1:f7:43:c7:28:c9:42:97: 0a:50:25:f0:0d:06:8d:a4:d5:7b:ce:72:b6:d9:41: d6:f2:5c:b7:12:de:a6:44:95:40:1e:5b:7a:00:71: d9:8a:68:42:14:bf:2b:29:26:3c:76:d9:0f:8c:5f: c5:80:09:61:cd:b7:88:b0:2d:c9:23:5b:ca:12:5e: a2:b9:4a:22:f5:fa:b0:b3:0f:27:c7:77:b7:6f:2c: b2:2f:5c:1f:b1:55:b0:ad:23:96:a4:cf:4c:a4:94: 5a:be:4d:9f:0c:f3:59:4b:4e:0c:e2:3e:0c:a3:7b: 2b:a0:b7:b9:41:75:56:23:e1:82:1d:2e:4d:08:5a: a0:1e:59:60:88:2f:89:61:08:fa:79:57:6d:c2:04: 8a:e2:b4:6a:d9:fa:78:3a:42:6e:d7:2f:f4:b8:68: 2f:54:44:92:25:0b:a4:96:e8:ab:fe:49:77:24:78: fb:8d:0b:88:10:ad:e1:a3:b4:aa:a8:c8:4f:05:9f: a5:64:e9:fe:96:fb:88:3a:8f:f6:d2:f1:b0:61:4a: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:5D:6E:22:20:7B:EB:A7:45:D8:EA:E4:E5:3F:80:19:2F:A0:F2 X509v3 Authority Key Identifier: keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:57:75:7f:7f:39:f6:b3:fe:b9:46:7d:b5:d5:cf:68:ea:de: 86:06:37:aa:f3:c8:79:94:73:3a:8e:12:bb:d4:c4:b1:2a:15: 88:9f:54:af:3e:db:80:60:a7:a9:dc:20:f0:b2:c5:47:80:fe: 69:77:2b:56:26:80:f4:b5:34:ab:bc:92:1d:17:55:e0:3c:28: 2a:47:96:f1:36:f9:29:35:2f:d9:7e:bd:20:03:e3:3e:96:2d: fb:3b:40:6f:cf:e0:ec:ea:29:31:06:96:56:28:c6:f8:e6:f9: 95:01:31:16:05:93:5f:40:c3:49:d7:cd:c9:61:3d:7e:bf:55: ed:61:46:f7:28:d3:a1:dd:75:41:6d:75:ab:35:21:c3:d9:84: e2:00:7e:c0:86:2d:78:62:07:da:69:14:ce:64:cc:c5:50:17: d4:08:7d:f8:a8:54:8a:80:97:05:c3:43:6c:92:9a:67:09:c4: 3b:bd:fd:2f:d5:79:2c:97:fd:b2:cf:67:18:a1:14:43:9f:ee: 39:da:f1:eb:1f:18:a6:f1:d8:df:6b:8e:76:1e:50:b5:b6:26: 9a:17:d8:ba:04:a8:d9:21:c3:c8:2b:11:cd:fc:13:49:82:c0: af:eb:11:ca:6a:56:2e:d5:36:a3:34:00:ea:01:17:ad:9c:99: 69:bc:49:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLanLigPO1w+z76M/StMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTFkZGExZGY3M2YzZmY2YWU0ZjVlN2M3YjI0Y2FiMzVl Njg0OWQwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD Eyg3MWViNWQ2ZTIyMjA3YmViYTc0NWQ4ZWFlNGU1M2Y4MDE5MmZhMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykj43Nf6rnqI1wYcWfaUOe9Nryu8 OxN7oYhhgAnjIisVEtHg/SXZ1ZvKKXT4Fb/V4x7T4fdDxyjJQpcKUCXwDQaNpNV7 znK22UHW8ly3Et6mRJVAHlt6AHHZimhCFL8rKSY8dtkPjF/FgAlhzbeIsC3JI1vK El6iuUoi9fqwsw8nx3e3byyyL1wfsVWwrSOWpM9MpJRavk2fDPNZS04M4j4Mo3sr oLe5QXVWI+GCHS5NCFqgHllgiC+JYQj6eVdtwgSK4rRq2fp4OkJu1y/0uGgvVESS JQukluir/kl3JHj7jQuIEK3ho7SqqMhPBZ+lZOn+lvuIOo/20vGwYUq5qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHrXW4iIHvrp0XY6uTlP4AZL6DyMB8GA1UdIwQY MBaAFMLh3aHfc/P/auT158eyTKs15oSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NzFjMjgtNjZmMy00MDZkLWJiNTQt OGU0MDQzNWY0YmEzLzEvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NzFjMjgtNjZmMy00MDZkLWJiNTQtOGU0MDQzNWY0YmEz LzEvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1d1f385 9rP+uUZ9tdXPaOrehgY3qvPIeZRzOo4Su9TEsSoViJ9Urz7bgGCnqdwg8LLFR4D+ aXcrViaA9LU0q7ySHRdV4DwoKkeW8Tb5KTUv2X69IAPjPpYt+ztAb8/g7OopMQaW VijG+Ob5lQExFgWTX0DDSdfNyWE9fr9V7WFG9yjTod11QW11qzUhw9mE4gB+wIYt eGIH2mkUzmTMxVAX1Ah9+KhUioCXBcNDbJKaZwnEO739L9V5LJf9ss9nGKEUQ5/u Odrx6x8YpvHY32uOdh5QtbYmmhfYugSo2SHDyCsRzfwTSYLAr+sRympWLtU2ozQA 6gEXrZyZabxJwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:49 2025 by rpki-client